GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: apicurio-registry-fips, kayenta, s3proxy-fips, wazuh-indexer, zipkin, apache-tika, strimzi-kafka-operator-fips, cassandra-fips, knative-kafka-broker, trino, opensearch-fips, apache-pulsar-fips, apache-hop, elasticsearch, ontop, apache-camel-karavan-devmode,...

CVE-2026-54515 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, keycloak, wildfly, zipkin, cassandra, airflow, kserve-modelmesh, nextflow, apache-tika, apicurio-registry, apache-nifi-registry, gradle, kafka, spdx-tools-java, cassandra-reaper, solr, dependency-track, apache-pulsar, neo4j,...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, keycloak, wildfly, zipkin, cassandra, airflow, kserve-modelmesh, nextflow, apache-tika, apicurio-registry, apache-nifi-registry, gradle, kafka, spdx-tools-java, cassandra-reaper, solr, dependency-track, apache-pulsar, neo4j,...

CLEANSTART-2026-RD06185 Security fixes for CVE-2024-29371, CVE-2026-1225, CVE-2026-24281, CVE-2026-24308, CVE-2026-42577, CVE-2026-42583, ghsa-25qh-j22f-pwp8, ghsa-3677-xxcr-wjqv, ghsa-72hv-8253-57qq, ghsa-7xrh-hqfc-g7qr, ghsa-crhr-qqj8-rpxc, ghsa-mj4r-2hfc-f8p6, ghsa-qqpg-mvqg-649v, ghsa-rwm7-x88c-3g2p applied in versions: 7.6.9-r2, 7.6.9-r3, 7.6.9-r4, 7.6.9-r5

Multiple security vulnerabilities affect the confluent-common-docker package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-pubsub, cloud-provider-aws, local-path-provisioner, modelmesh-runtime-adapter, container-object-storage-interface, vault-k8s, gitlab-runner, octo-sts, vault-benchmark, rancher-machine, docker-credential-ecr-login, kubeflow-katib, pvc-autoresizer,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: configmap-reload-fips, karma-fips, azuredisk-csi-fips, openbao-k8s-fips, container-object-storage-interface, nvidia-nsight-compute-12.8, dagdotdev, falco, cluster-api, nvidia-nsight-compute-13.0, kserve-rest-proxy, cluster-autoscaler-fips,...

CVE-2025-52999 vulnerabilities

Vulnerabilities for packages: spark, gradle-stage0, scala, cassandra-reaper, cassandra, confluent-common-docker, tez, celeborn...

GHSA-H46C-H94J-95F3 vulnerabilities

Vulnerabilities for packages: spark, gradle-stage0, scala, cassandra-reaper, cassandra, confluent-common-docker, tez, celeborn...

GHSA-WXR5-93PH-8WR9 vulnerabilities

Vulnerabilities for packages: sonarqube, apicurio-registry, apache-nifi, apache-activemq-artemis, akhq, druid, kafka, spdx-tools-java, wildfly, strimzi-kafka-operator, cassandra-reaper, confluent-common-docker, tez, trino, celeborn, opensearch, jenkins, jenkins-plugin-manager...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: apache-nifi, opensearch, camunda-zeebe, wildfly, prometheus-jmx-exporter, neo4j, jenkins-plugin-manager, apicurio-registry, druid, kafka, trino, hadoop-client-modules, confluent-kafka-jre-bcfips, sonarqube, strimzi-kafka-operator, jenkins, confluent-common-docker,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: age, jaeger, petname, yq, go-md2man, kind, sftpgo-plugin-eventsearch, wire-go, protoc-gen-go-grpc, stakater-reloader, whereabouts, k9s, newrelic-nri-statsd, cni-plugins, nats, gptscript, helm-docs, gops, paranoia, secrets-store-csi-driver-provider-azure,...